22485 matches found
GHSA-Q675-QJ96-32M9 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs, seaweedfs-fips, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, mattermost-fips, seaweedfs-operator, seaweedfs-operator-fips...
CVE-2025-6545 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-V62P-RQ8G-8H59 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-H7CP-R72F-JXH6 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2025-6547 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE allows a perpetrator to gain unauthorized access to read and modify protected information.
The vulnerability of the software interface of a Git-based software platform for collaborative code development on GitLab EE is related to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder, operating remotely, to gain...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the HttpExecutor.prepareRedirectUrlOptions process. An attacker can obtain sensitive credentials, such as GitLab's PRIVATE-TOKEN or mixed-case Authorization headers, by leveraging a...
CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...
CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...
GHSA-R82J-G6Q9-MVX8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-8589 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-9694 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-Q9J8-24P8-JQ8J vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-9204 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-7MQ5-3VCF-V96V vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6277 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-5CR4-QWVX-32J2 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-C4M8-PV9J-V7MM vulnerabilities
Vulnerabilities for packages: gitlab-runner...